Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3t3UZKUq4A7cS9txhP8boLKbez8.roa
File: 3t3UZKUq4A7cS9txhP8boLKbez8.roa (raw, json)
Hash identifier: fwyGfEdcI3mzxHKScZDgFEdsKMCrdljYAVB/zEFwl2w=
Subject key identifier: DE:DD:D4:64:A5:2A:E0:0E:DC:4B:DB:71:84:FF:1B:A0:B2:9B:7B:3F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01842DBD9586A20C25E89943486F08A4C076
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3t3UZKUq4A7cS9txhP8boLKbez8.roa
Signing time: Mon 31 Oct 2022 11:11:49 +0000
ROA not before: Mon 31 Oct 2022 11:11:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2d:bd:95:86:a2:0c:25:e8:99:43:48:6f:08:a4:c0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 31 11:11:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=deddd464a52ae00edc4bdb7184ff1ba0b29b7b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5f:29:18:9d:b5:98:6d:d0:c8:a8:48:e2:57:
13:1e:b5:12:e0:5b:55:6c:62:7a:b7:72:be:8a:43:
67:d6:d5:b3:60:85:a4:60:56:fb:e6:47:c4:dc:1c:
e1:97:4f:36:56:cd:77:a0:36:5a:62:59:a4:9a:c3:
22:d5:02:42:45:ed:f7:a9:9f:7c:eb:58:09:e2:6b:
71:0a:85:e6:73:75:25:1d:85:11:0e:12:85:b4:00:
62:50:a9:2c:4b:77:52:a7:cf:cf:7e:f7:d1:72:59:
3a:e1:1b:49:d3:e5:b6:b2:e5:af:98:7f:d8:6b:6e:
b5:de:eb:d2:aa:a7:88:d5:77:92:71:e8:0a:ec:99:
00:b4:30:47:7d:6f:c8:2b:10:0d:ec:e6:81:b8:59:
b1:e8:45:e7:9e:43:78:8d:a0:7c:a8:fc:6f:c6:67:
0a:73:f7:3e:05:37:56:8f:f0:62:68:c2:80:27:f0:
dd:d2:cc:10:d8:30:a9:9e:0c:90:66:19:38:a9:bf:
1b:3b:f7:d1:12:d3:cd:1c:6a:b0:14:5d:ed:bb:cf:
d8:8c:1f:c1:e7:d9:73:94:d1:96:4c:88:8b:05:35:
63:4d:31:e0:c1:eb:f2:72:18:01:25:a3:e7:6c:cb:
e9:f2:b4:4f:bd:e1:c7:cb:ad:95:bf:a8:e7:8a:fa:
07:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DD:D4:64:A5:2A:E0:0E:DC:4B:DB:71:84:FF:1B:A0:B2:9B:7B:3F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3t3UZKUq4A7cS9txhP8boLKbez8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:c2:44:40:28:c8:97:f6:0a:c9:b1:c4:11:50:e2:72:f9:1e:
42:c4:67:a4:d9:69:a1:6b:90:ea:f1:9d:90:db:c4:24:7f:da:
d9:07:f1:ff:4e:d8:46:12:e7:10:f8:89:ea:b1:ba:9f:bf:9d:
47:ae:23:f2:fa:38:61:54:b6:9c:5a:7a:a1:47:2f:d7:12:3b:
92:b5:a3:70:3b:96:d4:6c:f8:28:73:f5:bd:a0:e8:51:bc:79:
08:54:a6:e0:33:09:bf:f9:19:2e:fa:56:2c:75:40:b2:96:b5:
5b:44:ca:e4:30:a3:2e:a2:e3:1e:2d:db:2f:92:1c:e9:c9:f7:
d4:2b:64:aa:7a:84:46:4e:d5:15:96:b5:9c:11:b5:3b:0f:20:
c2:f7:07:46:3c:62:4b:1f:0b:bf:f1:3e:39:93:c9:da:68:fd:
f6:25:62:15:55:a3:3e:2f:39:e0:0f:77:5c:a5:fc:58:92:0a:
c5:5d:1b:c8:7c:be:95:9f:47:f3:d9:7c:77:ed:e2:ab:a4:73:
26:8f:15:79:f8:ef:9b:41:e0:ef:bf:41:b1:7c:b0:12:b4:3d:
fa:71:d1:0d:85:5d:8d:cf:cf:3e:4d:2c:16:cd:84:2f:f2:21:
d0:cb:cf:c0:a7:dd:bd:96:8a:f9:e8:a4:06:4b:25:c9:41:c5:
e2:72:c6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:50:47 2025 by rpki-client